openai-vision

PassAudited by ClawScan on May 10, 2026.

Overview

The visible skill is a coherent OpenAI vision-analysis guide, with expected notes around uploading chosen images to OpenAI and using OpenAI API access.

This appears safe to use for its stated purpose if you are comfortable sending selected images to OpenAI. Avoid using it on private screenshots, IDs, credentials, medical records, or confidential business images unless your OpenAI account and data-retention settings are appropriate.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Images, screenshots, or visible text chosen for analysis may be sent to OpenAI and could contain sensitive information.

Why it was flagged

The skill supports reading local image files, base64-encoding them, and placing them into an OpenAI vision request. This is purpose-aligned, but it means selected image contents may leave the user's device.

Skill content
"Image sources": URL, Base64-encoded data, or local file paths ... "url": f"data:{media_type};base64,{base64_image}"
Recommendation

Only analyze files you intend to upload to OpenAI, redact sensitive content when appropriate, and confirm the provider's data-use and retention settings.

What this means

Using the skill may require access to an OpenAI account and may incur API costs under that account.

Why it was flagged

The examples use the OpenAI client, which normally relies on an OpenAI API key or account configuration. This is expected for an OpenAI vision skill, though the registry metadata does not declare a credential requirement.

Skill content
from openai import OpenAI

client = OpenAI()
Recommendation

Use a dedicated, revocable OpenAI API key with appropriate billing limits, and monitor usage.

What this means

If you run the examples yourself, dependency installation choices are left to you.

Why it was flagged

The instruction-only skill references the OpenAI Python library but provides no install specification or pinned dependency. No automatic install is shown, so this is a low-impact provenance note rather than a concern.

Skill content
The following Python libraries are required:

from openai import OpenAI
Recommendation

Install the OpenAI package from the official package index or a trusted source, and prefer current, reviewed versions.